Carecam Hmt.cm2507 Firmware
6 CVEs affecting Carecam Hmt.cm2507 Firmware. Latest disclosed: 2026-09-18. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-85497 | Critical | 9.8 | 2026-09-18 | CareCam CM2507 IP cameras store the device's root-account password using a fixed legacy password hash that provides insufficient resistance to offline cracking… |
CVE-2026-88259 | High | 7.5 | 2026-09-18 | CareCam CM2507 IP cameras do not require authentication for access to its network video streaming service. An unauthenticated attacker with network access to t… |
CVE-2026-84398 | High | 7.5 | 2026-09-18 | CM2507 IP cameras accept an empty password for a privileged account exposed through its ONVIF management service. An attacker with network access to the affect… |
CVE-2026-81305 | Medium | 6.8 | 2026-09-18 | CM2507 IP cameras automatically execute a predetermined script from removable media without verifying its authenticity or integrity. An attacker with physical… |
CVE-2026-85478 | Low | 3.5 | 2026-09-18 | A CM2507 IP camera running firmware version HMT.CM2507 v251211.1507 exposes an interactive bootloader through a physical debug interface without requiring auth… |
CVE-2026-84400 | Low | 3.1 | 2026-09-18 | CareCam CM2507 IP cameras contain an insufficiently protected network maintenance mechanism that can activate a remote debugging service. An attacker on the sa… |